0

Loading Experience

BalachandarM

Cloud & AI Security Engineer

Open to Internship & Full-time Roles
AWS Certified
AI Security

I secure cloud infrastructure and defend AI systems.

From VPC hardening to adversarial ML defense — building resilient security layers across cloud platforms and AI pipelines.

Securing the cloud.
Safeguarding AI.

Cloud SecurityAI SafetyThreat ModelingAWSPython

Explore my work

About

Who I Am

Balachandar M
Bharat ScoutsRajya Puraskar — Bharat Scouts
IEEEIEEE Member

I'm Balachandar M, a cybersecurity engineering student at Rathinam Technical Campus, Tamil Nadu. I hold CompTIA Security+ and AWS Cloud Practitioner certifications, and I focus on building cloud-native security tooling from the ground up — not configuring dashboards, but writing the detection logic behind them.

I've designed and built three end-to-end security platforms: SecOps AI Copilot — monitors AWS CloudTrail with 10 MITRE ATT&CK-mapped detection rules and uses Gemini 1.5 Pro to auto-generate full incident reports; CloudGuard — scans 8 AWS service types against 300+ CIS Benchmark rules and generates exact CLI fix commands per finding; and ThreatLens — ingests CVEs from NVD, CISA KEV, and EPSS daily and ranks them by composite exploit risk using MITRE ATT&CK-mapped attack chains.

My approach is engineer-first: understand the attack surface, model the risk against a real framework — MITRE ATT&CK, CIS Benchmark, NIST CSF — and ship something that works. I believe the best security is built, not bought.

“Security isn't a feature — it's the foundation everything else is built on.”

3

SECURITY PROJECTS

4

ACTIVE CERTIFICATIONS

3

SECURITY TOOLS

24/7

CLOUD MONITORING

Interactive Root Access

Execute commands to explore my environment.

root@bala-sec-env:~
Cloud Security OS v2.4.1 initialized.
Type 'help' to see available commands.
➜~

Selected Work

Projects

SecOps AI Copilot

AI-powered Security Operations platform — correlates CloudTrail alerts in real-time and auto-generates structured incident reports.

2026

Continuously monitors AWS CloudTrail, applies 10 MITRE ATT&CK-mapped detection rules, and uses Gemini 1.5 Pro to correlate multi-event attack chains. Auto-generates full incident reports with timeline, affected ARNs, root cause, and remediation. Real-time WebSocket dashboard with RBAC: Analyst / Lead Analyst / Manager.

10 detection rules mapped to MITRE ATT&CK technique IDs
AI correlates multi-event attack chains across CloudTrail logs
Auto-generates incident reports: timeline, ARNs, remediation
RBAC-gated dashboard: Analyst / Lead Analyst / Manager
FastAPINext.jsGemini 1.5 ProAWS CloudTrailPostgreSQLRedisDockerMITRE ATT&CK
View Code

CloudGuard

AI-powered Cloud Security Posture Manager — scans 8+ AWS service types against 300+ CIS rules and generates exact CLI remediation commands.

2026

Uses boto3 to enumerate S3, EC2, IAM, VPC, RDS, Lambda, and CloudFront in parallel. Evaluates each against CIS AWS Foundations Benchmark v2.0. For every finding, Gemini 1.5 Pro generates the exact AWS CLI fix command. Tracks compliance score over time and fires email alerts via AWS SES when posture drops.

Parallel boto3 scan: S3, EC2, IAM, VPC, RDS, Lambda, CloudFront
300+ rules from CIS AWS Foundations Benchmark v2.0
AI generates exact AWS CLI fix command per finding
Compliance scoring across CIS, NIST, and SOC 2 with drift alerts
FastAPIPython boto3Next.jsGemini 1.5 ProPostgreSQLAWS SESDockerCIS Benchmark v2.0NIST CSF
In Progress

ThreatLens

Vulnerability intelligence platform — ingests 25,000+ annual CVEs from NVD, CISA KEV & EPSS, filtered to your stack by actual exploit risk.

2026

Daily sync from NVD, CISA Known Exploited Vulnerabilities, and EPSS. Matches CVEs against your asset inventory and scores via composite formula: CVSS (40%) + EPSS (40%) + KEV status (20%). Gemini 1.5 Pro chains related CVEs into attack paths mapped to MITRE ATT&CK. Sends weekly digest with prioritised patch roadmap.

Daily sync from NVD, CISA KEV, and EPSS
Composite scoring: CVSS (40%) + EPSS (40%) + KEV status (20%)
MITRE ATT&CK technique mapping per CVE
AI chains related CVEs into exploit path sequences
FastAPINext.jsGemini 1.5 ProNVD APICISA KEVEPSSPostgreSQLAWS SESDockerMITRE ATT&CK
In Progress

Expertise

Skills & Certifications

Security Fundamentals

Network SecurityCryptography & PKIIdentity & Access ManagementIncident Response LifecycleRisk ManagementSecurity ControlsEndpoint Security ConceptsWireless Security Basics

Cloud Security

AWS IAM & Least PrivilegeAWS CloudTrail & Security HubS3, EC2 & VPC SecurityCIS AWS Benchmark v2.0CSPM & Shared ResponsibilityAWS RDS SecurityAWS SES AlertingCloud Misconfiguration Detection

Threat Detection & Vuln. Mgmt

MITRE ATT&CK FrameworkCVE Analysis & CVSS ScoringEPSS & CISA KEV TrackingAlert Triage & False Positive ReductionMTTD / MTTR MetricsVulnerability PrioritisationAttack Chain AnalysisNVD & Threat Intelligence

GRC & Compliance

NIST Cybersecurity FrameworkCIS ControlsSOC 2 Trust Service CriteriaRisk Assessment & DocumentationCompliance MonitoringAudit Trail ConceptsSecurity Policy Basics

Programming & Tools

PythonLinux / UbuntuGit & GitHubDockerAWS CLITypeScript / JavaScriptSQL BasicsBash Scripting

AI Security

Learning
Gemini 1.5 Pro APIPrompt Engineering for SecurityOWASP LLM Top 10NIST AI Risk Management FrameworkMITRE ATLASAI Threat Modeling

Certifications

CompTIA Security+
View
Aug 2026 – Aug 2029

CompTIA Security+

CompTIA

AWS Certified Cloud Practitioner
View
Apr 2026 – Apr 2029

AWS Certified Cloud Practitioner

Amazon Web Services

OCI AI Foundations Associate
View
Jul 2025 – Jul 2027

OCI AI Foundations Associate

Oracle University

Introduction to Cybersecurity
View
Dec 2024

Introduction to Cybersecurity

Cisco Networking Academy

AI Fluency: Framework & Foundations
View
2026

AI Fluency: Framework & Foundations

Anthropic

Education

Bachelor of Engineering in CSE (AIML)

Rathinam Technical Campus

2023 – Present

CGPA: 7.45/10

Higher Secondary Certificate (HSC)

SMA Matric HR Sec School

2022 – 2023

Marks: 84.3/100

INDUSTRY INSIGHT

Virtual Experience

Tata Group

Virtual Job Simulation

Jan 2026

Cybersecurity Analyst

IAM fundamentals, strategy assessment, custom IAM solutions, and platform integration.

Deloitte

Virtual Job Simulation

Jan 2026

Cyber Analyst

Practical cybersecurity tasks covering threat analysis and enterprise security operations.